Blog Section
Google has announced mass layoffs affecting about 12,000 employees, which is approximately 6% of its total workforce. Among other information, reports have emerged that around 400 workers involved in the Fuchsia project will be laid off, representing about 16% of the total staff working on this OS. Additionally, it is reported […]
A patch release for the libXpm library, version 3.5.15, developed by the X.Org project and used for handling XPM format files, has been published. The new version fixes three vulnerabilities, two of which (CVE-2022-46285, CVE-2022-44617) can lead to denial of service when processing specially crafted XPM files. The third vulnerability (CVE-2022-4883) allows arbitrary commands to be executed when running applications that use libXpm. When privileged processes related to libXpm are executed […]
The release of the ArchLabs Linux distribution 2023.01.20 has been published, based on the Arch Linux package base and shipped with a lightweight desktop environment using the Openbox window manager (with optional availability of i3, Bspwm, Awesome, JWM, dk, dwm, Fluxbox, Xfce, Deepin, GNOME, Cinnamon, Sway). The ABIF installer is offered for setting up a stationary installation. The base package includes applications such as Thunar, Termite, Geany, Firefox, Audacious, […]
GitHub has announced its decision to discontinue support for the Subversion version control system. The ability to work with GitHub repositories through the centralized version control system interface Subversion (svn.github.com) will be disabled on January 8, 2024. Leading up to the official shutdown at the end of 2023, a series of test outages will be conducted, initially for several hours and then for a full day. The stated reason […]
OpenBSD has implemented a vulnerability exploitation protection technique based on randomly rearranging the executable file sshd at each system boot. Previously, such a rearrangement technique was applied to the kernel and the libraries libc.so, libcrypto.so, and ld.so, and now it will be used for certain executables as well. The method is also planned to be implemented for ntpd and other server applications in the near future. […]
Corrective updates for Ruby on Rails framework versions 7.0.4.1, 6.1.7.1, and 6.0.6.1 have been released, fixing 6 vulnerabilities. The most critical vulnerability (CVE-2023-22794) may allow execution of SQL commands specified by an attacker when using external data in comments processed in ActiveRecord. This issue is caused by the lack of necessary escaping of special characters in comments before they are stored in the DBMS. The second vulnerability (CVE-2023-22797) may be applied to […]
The release of project pandoc 3.0 is available, developing the library and command-line utility for converting text markup formats. It supports conversion between over 50 formats, including docbook, docx, epub, fb2, html, latex, markdown, man, odt, and various wiki formats. Support for arbitrary Lua processors and filters is included. The code is written in Haskell and is distributed under the GPLv2 license. […]
A report on the composition of GNOME user environments has been published, based on data collected from 2,560 users who voluntarily used the gnome-info-collect tool to send information about their systems. The data collected will help developers understand user preferences and consider them when making decisions related to enhancing usability and the development of the shell. Distributions used: Fedora 54.69% Arch […]
Debian developers have announced the achievement of the first stage of the package freeze for Debian 12 "Bookworm", which implies the cessation of performing "transitions" (updating packages that require dependency adjustments in other packages, leading to temporary removal of packages from Testing), as well as the halt of updates for packages required for building (build-essential). A transition to a soft package freeze is scheduled for February 12, 2023, […]
A new release of gpupdate, a tool for applying group policies in 'Alt' distributions, has been published. The gpupdate mechanisms apply group policies on client machines both at the system level and for individual users. The gpupdate tool is part of an alternative solution by 'Basil SPU' for implementing Active Directory domain infrastructure under Linux. The application supports operation within MS AD or Samba domain infrastructure […]
SQLite project developers have begun testing an experimental HCtree backend that supports row-level locking and provides a high degree of concurrency when processing requests. The new backend aims to improve the efficiency of SQLite use in client-server systems that need to handle a significant number of simultaneous write requests to the database. The b-tree structures originally used in SQLite for data storage are not […]
Engineers from Collabora have published a report on the implementation of a project to ensure the build of the GNU C Library (glibc) system library using LLVM tools (Clang, LLD, compiler-rt) instead of GCC. Until recently, glibc remained one of the significant components of distributions that supported building only with GCC. The difficulties in adapting glibc to build with LLVM are caused by differences in […]